Senior DevOps Engineer

The Senior DevOPS/Cloud Engineer is responsible for designing, implementing, and maintaining scalable and secure cloud infrastructure and deployment pipelines primarily on AWS. This role focuses on developing automated workflows, managing containerized applications, and ensuring robust networking and security configurations to support critical workloads. Responsibilities:

• Collaborate with architecture, development, security, QA, and operations teams to define infrastructure and deployment requirements.
• Design and maintain GitHub Actions workflows for building, testing, deploying, and rolling back application and infrastructure changes.
• Develop and maintain AWS CDK applications for repeatable provisioning of cloud infrastructure and configuration.
• Provision and support AWS Glue jobs, Amazon Data Firehose, AWS DMS, and related data services with troubleshooting of network connectivity.
• Deploy, configure, scale, and monitor Amazon ECS services on AWS Fargate including Docker image management and load balancing.
• Manage serverless frontend infrastructure using Amazon S3, CloudFront, AWS WAF, and related security and deployment configurations.
• Design and maintain VPC networking, subnets, route tables, NAT gateways, VPC endpoints, security groups, and DNS resolution.
• Create and maintain least-privilege IAM roles, AWS KMS keys, encryption controls, and secrets integration.
• Manage EC2 launch templates and Auto Scaling groups including lifecycle, health checks, and patching procedures.
• Implement CloudWatch monitoring, logging, dashboards, alarms, and incident-response procedures.
• Prepare infrastructure and pipeline documentation, network diagrams, deployment instructions, and knowledge-transfer materials.

• Expertise in GitHub Actions workflows and AWS CDK using JavaScript and Python, including secure authentication and environment promotion.
• Strong experience with Amazon ECS on AWS Fargate, Docker, Amazon ECR, and EC2 Auto Scaling group management.
• Advanced AWS networking and security knowledge including VPC, subnets, NAT, endpoints, IAM, KMS, and troubleshooting AWS Glue job connectivity.
• Proven ability to provision and operate AWS Glue, Amazon Data Firehose, AWS DMS, Amazon S3, CloudFront, AWS WAF, and related monitoring and logging services.

• Experience with GitHub OpenID Connect federation, protected environments, reusable workflows, and deployment approvals.
• Familiarity with Java and JavaScript build tooling, AWS CDK unit testing, infrastructure policy validation, and CloudFormation drift detection.
• Knowledge of Amazon CloudWatch, AWS CloudTrail, AWS Config, Systems Manager, Secrets Manager, Route 53, Certificate Manager, and security monitoring.
• Experience operating regulated healthcare or public-sector workloads with privacy-aware logging, encryption, and auditability.

• GitHub Actions and AWS CDK expertise including secure authentication, reusable workflows, testing, deployment, rollback, and troubleshooting - 25 Points
• Amazon ECS on AWS Fargate, Docker, Amazon ECR, and EC2 Auto Scaling experience including deployment, scaling, load balancing, and troubleshooting - 25 Points
• AWS networking and security proficiency including VPCs, subnets, NAT, endpoints, IAM, KMS, encryption, and Glue job connectivity troubleshooting - 25 Points
• Provisioning and operational experience with AWS Glue, Data Firehose, DMS, S3, CloudFront, WAF, monitoring, logging, and incident support - 25 Points

• Automated GitHub Actions workflows supporting application and infrastructure deployment and rollback.
• Reusable and well-documented AWS CDK infrastructure code and configuration.
• Fully provisioned, secure, and scalable AWS cloud infrastructure including networking and security components.
• Operational ECS services with monitoring, logging, and health checks.
• Comprehensive documentation including infrastructure designs, network diagrams, deployment instructions, runbooks, and test evidence.

• Proven experience with GitHub Actions and AWS CDK in JavaScript/Python for secure, automated infrastructure deployment.
• Hands-on expertise with Amazon ECS on AWS Fargate, Docker, Amazon ECR, and EC2 Auto Scaling including troubleshooting and observability.
• Strong AWS networking and security skills including VPC design, IAM roles, KMS encryption, and AWS Glue network troubleshooting.
• Experience provisioning and supporting AWS Glue, Data Firehose, DMS, S3, CloudFront, WAF, and managing monitoring and incident response.

Preferred